Monday, November 18, 2013

DDoS Attacks: Cyberterror or Cyber Warfare?

On of the most common types of cyber attacks occurring today is known as a distributed denial of service attack, or DDoS. Distributed Denial-Of-Service is a form of electronic attack involving multiple computers, which send repeated HTTP requests or pings to a server to load it down and render it inaccessible for a period of time.  The purpose of DDoS attacks are typically most comparable to street protests, so these types of attacks are usually seen as such.  An example of a large DDoS attack was Operation Titstorm, which were a series of denial-of-service attacks conducted by the Anonymous online community against the Australian government in response to proposed web censorship regulations. 

Now let me define both cyberterrorism and cyber warfare.

Cyberterrorism: “A criminal act perpetrated through computers resulting in violence, death and/or destruction, and creating terror for the purpose of coercing a government to change its policies.” (Wilson, 2003)

Cyber Warfare:  "Refers to politically motivated hacking to conduct sabotage and espionage."

At first glance, I would say this is an easy one... a DDoS attack is an example of Cyber Warfare. However, if a successful DDoS attack shuts down a major server in say China, then wouldn't that constitute a form of destruction? Also, the last part of the definition that says "creating terror for the purpose of coercing a government to change its policies" sounds an awful lot like the purpose of a street protest, which is regularly compared to it's virtual version known as DDoS.






Sources: 
http://resources.infosecinstitute.com/cyberterrorism-distinct-from-cybercrime/
http://en.wikipedia.org/wiki/Denial-of-service_attack

2 comments:

  1. DDoS can and often is used for lots of reasons, not just terrorism or warfare. I've seen posts of people who DDoS websites/servers just to "troll" or be a dick. Its so easy for people with technical knowledge to get these attacks together and assault whatever website they want now. I suppose it can be still considered terrorism, but not so much to destroy or harm, mostly just to disrupt and annoy. Still, there are much more dangerous cyber attackers out there.

    ReplyDelete
  2. I would never think of a DDoS attack as an act of Terrorism but following the defenition of cyberterrorism it's possible it is. I think it would highly depend on what the DDoS attack is used for like you said. If it's just to distrupt the service of a website to bring it down and for no other purpose than that than I wouldn't consider that an act of Terrorism but if it's used for the purpose of bringing down a major server, as you sad, to then do something when the major server is down it's possible it would be an act of Terrorism. Although it seems a DDoS is just an annoying thing, I've never thought of it being an act of terrorism but it seems it possibly could be.

    ReplyDelete